Threats tagged 'brew-fdroidserver-cve-2026-73620'

GitPython versions >=0.7.0 and <2.4.5_3 contain vulnerabilities in the IndexFile.checkout() and TagReference.create() methods that allow unguarded forwarding of git command options. This enables arbitrary file overwrite via the --prefix option in git checkout-index and arbitrary file read via the -F/--file option in git tag. Both vulnerabilities allow an attacker with repository write access to influence file system operations outside the repository, potentially leading to code execution or sensitive file disclosure.